News for hackers. Stuff that matters.
Re:Turn on MFA Before Crooks Do It for You by cutemonster on Saturday June 20, 2020 @12:39PM (#23584856)
> Download the QR code and decode it to get a string like the following: otpauth://totp/Domain%3Ayour%40email.com?secret=HXDMVJECJ...

How do you download and decode?

Any Linux software tips?

And how do you verify and double check you did it right? (Saved the exact correct code)

Re:Turn on MFA Before Crooks Do It for You by saulrh on Saturday June 20, 2020 @06:43PM (#23588050)
Right-click in firefox and "save image". Drop it in /tmp so it gets nuked on next reboot (tmpfs yay). Pick your favorite barcode reader tool; I ended up deciding on `zbar-tools` based on... not honestly that much research. Invoke `zbarimg /tmp/qr.png`. It'll spit out the TOTP URI.

Verifying that I did it right: I manually enter the secret into a tool that can produce TOTP codes and verify that Google Authenticator and my backup are producing the same one-time passwords.

Re:Turn on MFA Before Crooks Do It for You by cutemonster on Saturday June 20, 2020 @06:55PM (#23588137)
Thanks!!